Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: JOTxgk10P0Z52SxbrTI/MqjS2Zb6PsJgMAAej3Xps2Q=
Subject key identifier: F5:08:27:9B:E0:4C:ED:29:7B:1D:DC:F8:6B:9B:BA:02:25:EC:F2:A5
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 019D273AE2159ABA88191A9FDA623BA9AF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: 7y9hj1vi8evyxMWsiJIGH1_53AM.roa (hash: Q69uQTzaOq7UQxdu+Czlq7rx75YhJrEs8hTR3Ul9WN0=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: 6Z29Ya/YiXQB5/FvsfeJTzD9L18T/ZUtX+aKtOw16WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e2:15:9a:ba:88:19:1a:9f:da:62:3b:a9:af:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=f508279be04ced297b1ddcf86b9bba0225ecf2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:6b:b3:e5:67:72:39:70:d9:ac:ca:b4:a7:
d0:15:9f:8e:7d:8d:92:49:4b:dc:f5:d9:d7:e4:7e:
0c:22:c7:92:ad:a5:c8:17:03:19:fc:af:64:43:b5:
8f:a1:29:00:0e:a8:07:9b:94:0a:59:b5:08:8a:21:
5c:10:07:e7:65:56:30:69:a1:7f:a7:2d:cb:f0:a0:
40:82:00:a9:44:53:b6:c0:c5:ee:9c:4b:95:1b:d1:
f9:09:07:84:ff:22:08:27:30:14:96:ae:e8:e4:5f:
3e:f0:1b:60:07:fc:5e:20:24:8b:9f:2a:7f:fe:95:
ba:90:09:35:40:24:cb:95:61:7f:c6:d1:db:e8:2d:
fb:e9:d1:ea:23:54:a4:a2:e9:18:30:f6:23:74:a6:
cb:24:bd:65:59:d9:e5:73:7b:84:fb:d3:b2:2e:8a:
ca:38:47:b0:03:d4:7b:eb:28:16:0a:4e:95:70:68:
2f:4c:2a:87:5b:2c:6f:9e:b9:85:65:b8:48:4e:16:
fd:04:c5:b8:15:04:78:da:43:75:27:c5:5b:78:d2:
85:ee:2a:88:55:50:32:44:83:e7:5d:d6:af:f1:d8:
8e:bd:31:63:3c:a6:d2:8e:e2:fe:39:90:25:a3:6a:
50:7c:47:2e:b9:87:ad:07:ea:e3:de:f5:eb:d3:6b:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:27:9B:E0:4C:ED:29:7B:1D:DC:F8:6B:9B:BA:02:25:EC:F2:A5
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f0:7a:2e:c0:33:34:b5:cc:27:29:1f:02:bb:ee:ce:e3:15:
56:72:59:ef:e6:d4:ef:10:6d:ab:57:57:45:43:e3:a8:67:60:
fb:47:58:6f:c9:c0:4b:d7:bf:6c:7f:5d:a1:ee:64:f0:55:84:
b5:df:63:a1:2b:bb:24:04:64:0f:eb:b2:cd:17:44:f5:94:c2:
94:92:d8:19:59:11:85:18:c4:c6:84:df:78:f4:bb:88:d5:46:
b2:e9:9e:25:28:77:be:ce:19:20:c1:ab:28:5f:4d:1b:f5:76:
1d:f0:99:33:8a:10:27:5f:9c:e7:aa:6b:d4:99:fb:af:91:4b:
6a:13:e6:c0:9a:f1:8a:70:9a:de:d3:57:cb:f1:96:59:c1:09:
d1:53:ff:c1:d3:89:cf:cb:d6:9d:d6:01:5b:3e:5a:b1:4c:db:
1c:03:59:c5:0c:6d:70:a5:76:2f:c0:0e:6b:e8:db:f2:52:c6:
03:2c:4a:43:dd:b9:c2:e0:8c:03:ad:20:cf:1a:aa:4c:44:a7:
e4:84:c3:d4:f8:98:b7:7b:34:15:63:6f:21:c5:9e:17:46:cd:
58:47:1a:a1:52:a0:f9:3b:d2:7d:e7:06:62:6a:d8:3e:aa:f6:
55:25:54:2c:f8:fb:24:10:4b:5d:91:ee:95:b2:91:e0:9b:86:
89:91:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:05 2026 by rpki-client